Hello

I need a software to limit bandwidth usage in a part of my network.

A computer with two network cards will run this software and will connect two parts of network to each other but it will do this with a limmited bandwidth which is selectable by us.

I will appereciate any comments.

Regards,
Mac

I tried this and failed, I just tend to mess things up. What you want is squid.

http://www.squid-cache.org/

check that out.

David

In fact I am a squid guru myself. I have installed more than 20 squids (transparent) for different ISPs and organizations, but squid is working for http protocol only.

I need something for whole tcp/ip.

Regards,
Mac

I think this is what you want it works great you can limit ranges of ip's or just one single ip

www.etinc.com
it called banwidth manager

You can run it as a gateway or as a bridge for the network.

DarkEdge

Great! This was exactly what I needed. It has very good features

This one is $695. Do you know any other product with lower price.

Regards,
Mac

THats the only one I know of and I will tell you it is more than worth the money I have yet to find any other software that comes close.

What's wrong with a freebsd bridge and ipfw? I've not done it, but on my last encounter with the ipfw manpage, it can limit bandwidth based on IP address for more than just itself.

Ad it is totally free.

The same can probably be achieved by Linux with the shaper module.

Originally posted by Lee-S
What's wrong with a freebsd bridge and ipfw? I've not done it, but on my last encounter with the ipfw manpage, it can limit bandwidth based on IP address for more than just itself.

And it is totally free.

This is definitely the Right Solution. A transparent bridge will allow you to apply arbitrary limits to specific packet streams (eg, limit ICMP packets to 10kbps and TCP SYN packets to port 80 to 25kbps), as well as allowing you to count bytes/packets for accounting purposes (if desired).

The hardware required is insanely cheap -- if, of course, you don't already have an old Pentium with 16MB RAM and a 1GB hard drive lying about -- and of course the software is free.

Originally posted by jks
The same can probably be achieved by Linux with the shaper module.

Anyone know the status of shaper? Is it considered stable?

Originally posted by slade
Anyone know the status of shaper? Is it considered stable?

I'm not sure what its official designation is, but I certainly wouldn't call it "stable". Comments like "if you try to ifconfig a device which is currently down a kernal dump will result" don't do much to inspire confidence.

Have you considered doing this at the switch level? A software solution is useless for dedicated servers because the server admin can just disable it.

Extreme Summit Full Layer3 switches support both ingress and egress bandwidth throttling.

Originally posted by nopzor
Have you considered doing this at the switch level? A software solution is useless for dedicated servers because the server admin can just disable it.

Extreme Summit Full Layer3 switches support both ingress and egress bandwidth throttling.

Quite correct, however the original poster was not looking to set this up on the servers in question, but on a gateway machine.

I am also interested in this type of solution for an idea I've been toying with for "broadband" internet access(1). I did find this document, that I believe will be useful:

http://www.linux.com/howto/Adv-Routing-HOWTO-8.html

(1). I hate that word, I never think I've spelled it right.

Hello,

think about some professional solution, we use Cisco routers. how much Mbps you need to limit? 2600 series is ok to 15Mbps. Software solution is always unstable ...

Regards
Peter

---------------------------------------
WestMaster dedicated solution
http://www.westmaster.com
ICQ: 15147330

Originally posted by westmaster
think about some professional solution, we use Cisco routers. how much Mbps you need to limit? 2600 series is ok to 15Mbps. Software solution is always unstable ...


If software is always unstable, why do you expect your precious Cisco routers to be any better? They run software as well, you know... software which has rather striking similarities to FreeBSD 2.2.x.

Hello Again

But cisco routers are expensive solutions. We currently use cisco 2500 series with one WAN port.

With this new solution we must purchase new expensive routers and put 25 series away.

I can not understand why linux kernel (or Free BSD) is not able to do this. It processes each packet arriving.

1- Could someone tell me what is this Linux solution about ?
I may want to work on it. Is it possible to use Port forwarding feature or something like that for this.

2- Also for the mean time how can I limit bandwidth usage on port 80 using squid cache?

Regards,
Mac

Originally posted by sarmadys
I can not understand why linux kernel (or Free BSD) is not able to do this. It processes each packet arriving.


They can. That's exactly what Lee-S, myself, and jks were trying to tell you.

Originally posted by cperciva

They can. That's exactly what Lee-S, myself, and jks were trying to tell you.

Yep, and it's easy too :-)

If you want to shape outgoing packets on Linux, you can do something like this:

shapecfg attach shaper0 eth0
shapecfg speed shaper0 32000

That would give you a new device named shaper0 that only transmits with a max of 32 kb/s.

Then you would assign an IP like this:

ifconfig shaper0 myhost netmask 255.255.255.240 broadcast 1.2.3.4.255 up
route add -net some.network netmask a.b.c.d dev shaper0

Check out the shaper.txt file in the documentation dir of the Linux kernel.